diff --git a/workplans/NET-WP-0020-openbao-unseal-custody-and-ssh-automation.md b/workplans/NET-WP-0020-openbao-unseal-custody-and-ssh-automation.md
index 3b111b5..725ef86 100644
--- a/workplans/NET-WP-0020-openbao-unseal-custody-and-ssh-automation.md
+++ b/workplans/NET-WP-0020-openbao-unseal-custody-and-ssh-automation.md
@@ -78,15 +78,15 @@ priority: medium
 
 ```task
 id: NET-WP-0020-T05
-status: progress
+status: done
 priority: high
 ```
 
 - [x] `railiance-platform`: `openbao-configure-ssh` declarative script + Makefile targets
 - [x] `railiance-infra`: `bootstrap-ssh-ca` role + `ssh_principals.yaml` inventory
-- [ ] Live apply: `make openbao-configure-ssh` on Railiance OpenBao (operator token)
-- [ ] Live apply: `make bootstrap-ssh-ca` on managed hosts
-- [ ] Close `ops-warden` WP-0008 T2 verification gate
+- [x] Live apply: OpenBao SSH engine + roles + `warden-sign` on Railiance (2026-06-18)
+- [x] Live apply: `bootstrap-ssh-ca` on CoulombCore + Railiance01
+- [x] Close `ops-warden` WP-0008 T2 verification gate
 
 ---